2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-2033 | — | — | — | Jan 22, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2018-2031 | — | — | — | Jan 22, 2019 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2018-6445 | — | — | 1.7% | Jan 22, 2019 | A Vulnerability in Brocade Network Advisor versions before 14.0.3 could allow a remote unauthenticated attacker to expor... |
| CVE-2018-6444 | — | — | 3.3% | Jan 22, 2019 | A Vulnerability in Brocade Network Advisor versions before 14.1.0 could allow a remote unauthenticated attacker to execu... |
| CVE-2018-6443 | — | — | 7.4% | Jan 22, 2019 | A vulnerability in Brocade Network Advisor Versions before 14.3.1 could allow an unauthenticated, remote attacker to log... |
| CVE-2018-19635 | — | — | 1.2% | Jan 22, 2019 | CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to escalate privileges in t... |
| CVE-2018-19634 | HIGH | 7.5 | 1.3% | Jan 22, 2019 | CA Service Desk Manager 14.1 and 17 contain a vulnerability that can allow a malicious actor to access survey informatio... |
| CVE-2018-14666 | MEDIUM | 6.8 | 1.0% | Jan 22, 2019 | An improper authorization flaw was found in the Smart Class feature of Foreman. An attacker can use it to change configu... |
| CVE-2018-13374 | MEDIUM | 4.3 | 38.1% | Jan 22, 2019 | A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 al... |
| CVE-2018-18908 | — | — | 0.6% | Jan 20, 2019 | The Sky Go Desktop application 1.0.19-1 through 1.0.23-1 for Windows performs several requests over cleartext HTTP. This... |
| CVE-2018-5915 | — | — | 1.3% | Jan 18, 2019 | Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear... |
| CVE-2018-5881 | — | — | 0.4% | Jan 18, 2019 | Improper validation of buffer length checks in the lwm2m device management protocol can leads to a buffer overflow in sn... |
| CVE-2018-5880 | — | — | 0.2% | Jan 18, 2019 | Improper data length check while processing an event report indication can lead to a buffer overflow in snapdragon mobil... |
| CVE-2018-5879 | — | — | 0.4% | Jan 18, 2019 | Improper length check while processing an MQTT message can lead to heap overflow in snapdragon mobile and snapdragon wea... |
| CVE-2018-5869 | — | — | 0.2% | Jan 18, 2019 | Improper input validation in the QTEE keymaster app can lead to invalid memory access in snapdragon mobile and snapdrago... |
| CVE-2018-5868 | — | — | 0.3% | Jan 18, 2019 | Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile and snapdragon mobile in ve... |
| CVE-2018-5867 | — | — | 0.3% | Jan 18, 2019 | Lack of checking input size can lead to buffer overflow In WideVine in snapdragon automobile, snapdragon mobile and snap... |
| CVE-2018-3595 | — | — | 0.2% | Jan 18, 2019 | Anti-rollback can be bypassed in replay scenario during app loading due to improper error handling of RPMB writes in sna... |
| CVE-2018-15784 | HIGH | 7.4 | 0.6% | Jan 18, 2019 | Dell Networking OS10 versions prior to 10.4.3.0 contain a vulnerability in the Phone Home feature which does not properl... |
| CVE-2018-11999 | — | — | 0.2% | Jan 18, 2019 | Improper input validation in trustzone can lead to denial of service in snapdragon automobile, snapdragon mobile and sna... |
| CVE-2018-11998 | — | — | 0.2% | Jan 18, 2019 | While processing a packet decode request in MQTT, Race condition can occur leading to an out-of-bounds access in snapdra... |
| CVE-2018-11993 | — | — | 0.4% | Jan 18, 2019 | Improper check while accessing the local memory stack on MQTT connection request can lead to buffer overflow in snapdrag... |
| CVE-2018-11288 | — | — | 0.2% | Jan 18, 2019 | Possible undefined behavior due to lack of size check in function for parameter segment_idx can lead to a read outside o... |
| CVE-2018-11284 | — | — | 0.5% | Jan 18, 2019 | Spoofed SMS can be used to send a large number of messages to the device which will in turn initiate a flood of registra... |
| CVE-2018-11279 | — | — | 0.5% | Jan 18, 2019 | Lack of check of input size can make device memory get corrupted because of buffer overflow in snapdragon automobile, sn... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now